# Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
# Distributed under the terms of the GNU General Public License v2

EAPI=2

DESCRIPTION="Chrome OS restricted set of certificates."
HOMEPAGE="http://src.chromium.org"
SRC_URI=""
LICENSE="BSD"
SLOT="0"
KEYWORDS="amd64 arm x86"

src_install() {
	# c_rehash (OpenSSL 0.9.8l 5 Nov 2009) is processing just .pem files so
	# rename the certificates from .crt to .pem. An alternative is to use
	# openssl directly to create the hash symlinks:
	#
	#   ln -s $cert.crt $(openssl x509 -noout -hash < $cert.crt).0
	#
	# However, c_rehash has smarts about incrementing the .0 extension if
	# necessary.
	CA_CERT_DIR=/usr/share/chromeos-ca-certificates
	insinto "${CA_CERT_DIR}"
	for cert in \
	  Equifax_Secure_Certificate_Authority \
	  GeoTrustGlobalCA_crosssigned \
	  GoogleInternetAuthority; do
	  newins ${FILESDIR}/$cert.crt $cert.pem
	done
	c_rehash "${D}/${CA_CERT_DIR}"
}